DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
5748519ed03191772c16b2593faf976b_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5748519ed03191772c16b2593faf976b_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
5748519ed03191772c16b2593faf976b_JaffaCakes118
Size
111KB
MD5
5748519ed03191772c16b2593faf976b
SHA1
473321a10bb0525ab73e7ca5b63566855089abfc
SHA256
ebd70bace7ae5d494d34b71b22727ad2a88e56f8f9a2c28352a382357cf8fc17
SHA512
a4f921bce3bc276b5b99cdc2bbfee322b043c336047cc50d1933e45fbc849639bdc167b9407c5aeafe7c805694108d05e26f7e87da6ccb8c006fb345cd266480
SSDEEP
3072:PKMM0PcSQYTgefKPUb1ZsCjwbrv3KSWC57VxTlGJ:SM50BYsef5h+GwbTZW+LTIJ
Checks for missing Authenticode signature.
resource |
---|
5748519ed03191772c16b2593faf976b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
GetModuleHandleA
LoadLibraryA
SetHandleCount
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE